> not so much as a default-enabled feature.

The browser opens a popup asking you if you want to grant access to a specific device for a specific website, it's not like random websites can just run adb commands on your phone

Yeah but still, I'd want that to only remotely be a thing. Like require enabling a developer setting for it.